Senior ForgeRock IAM Engineer (m/f/d)

**About the role**

We are looking for an experienced **Senior ForgeRock IAM Engineer (m/f/d)** to join Cognizant and help design, build and operate enterprise Identity & Access Management (IAM) solutions.

In this senior hands-on role, you will work with **ForgeRock Access Management (AM), Identity Management (IDM) and Directory Services (DS)** to deliver secure authentication, authorisation, federation, SSO and identity lifecycle capabilities. You will collaborate with security architects, application teams and DevOps specialists in an international environment.

**Your responsibilities**

• Design, develop and enhance IAM solutions using **ForgeRock AM, IDM and DS**.
• Build authentication journeys, authorisation policies, **SSO and adaptive authentication** capabilities.
• Implement federation and modern identity standards including **SAML 2.0, OAuth 2.0, OpenID Connect (OIDC) and JWT**.
• Develop IDM workflows, mappings, connectors and provisioning/deprovisioning processes.
• Build custom integrations and components using **Java, JavaScript and/or Groovy**.
• Integrate ForgeRock with directories, HR systems, databases, MFA providers, applications and cloud services.
• Configure and optimise **LDAP/Directory Services**, including replication, indexing and access controls.
• Support CI/CD, deployment automation and cloud/container-based environments.
• Troubleshoot complex IAM issues and perform root-cause analysis across applications and infrastructure.
• Contribute to technical standards, documentation, code reviews and mentoring of junior engineers.

**What you bring**

• **10+ years of overall IT experience**, including substantial hands-on experience with ForgeRock and IAM implementations.
• Strong experience with **ForgeRock AM and IDM**, including authentication journeys, SSO, policies, provisioning and reconciliation.
• Experience with **ForgeRock DS/OpenDJ**, LDAP, replication and performance optimisation.
• Hands-on knowledge of **SAML 2.0, OAuth 2.0, OIDC, JWT and REST APIs**.
• Strong **Java** development skills and experience with JavaScript and/or Groovy.
• Sound understanding of **IAM, RBAC/ABAC, least privilege and Zero Trust principles**.
• Experience with **Git, Maven/Gradle and CI/CD** tooling such as Jenkins, Azure DevOps or GitLab CI.
• Good understanding of application security, TLS/certificates, Linux and distributed environments.
• Strong analytical, communication and stakeholder-management skills.

**Nice to have**

• Experience with **ForgeRock Identity Gateway (IG)** and API security.
• Cloud IAM experience across **Azure, AWS or Google Cloud**.
• Experience with **Docker, Kubernetes or OpenShift**.
• Infrastructure-as-Code experience with **Terraform or Ansible**.
• Integration experience with MFA platforms and risk engines.
• Experience with monitoring platforms such as **Splunk, ELK, Prometheus/Grafana, AppDynamics or Dynatrace**.
• Knowledge of **SCIM** and Identity Governance (IGA).
• Relevant **ForgeRock, IAM or security certification**.
• Degree in Computer Science, Engineering or a related discipline, or equivalent practical experience.